Ahold Delhaize
bd_5a692f7ef7ceea95 · schema v1 · pii pii-v1
Full breach record for Ahold Delhaize →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
The family of Ahold Delhaize serve 72 million customers every week in the United States, Europe and Indonesia. Each brand shares a passion for delivering great food, value and innovations, and for creating inclusive workplaces that provide rewarding professional opportunities. Ahold Delhaize become a victim of the largest data breach. 6TB sensitive data will be published soon in our blog.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Apr 16, 2025
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Illinois State AGbd_da6f7dbd8f40e4c52025-06-01 · +46dCandidate
- Vermont State AGbd_2d390d6ac37cd64f2025-06-26 · +71dVerified
- Nebraska State AGbd_a0268a05406fb6ce2025-06-26 · +71dVerified
- Delaware State AGbd_aadedba96eaafa102025-06-26 · +71dVerified
Show 5 more filings ↓Show fewer ↑up to 76d gap
- Indiana State AGbd_c136e25907ccaf532025-06-26 · +71dVerified
- South Carolina State AGbd_fb8a7c8e75597c4a2025-06-26 · +71dVerified
- Massachusetts State AGbd_fa6bc5f0155cdf472025-06-27 · +72dVerified
- New Hampshire State AGbd_6c1e9546f09b05c62025-07-01 · +76dVerified
- Rhode Island State AGbd_e931ee06961cb99e2025-07-01 · +76dVerified
Filing propagation · 9 filings · 9 states
View merged incident ↗Pattern: first filing Jun 1 (IL), last Jul 1 (RI) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.